← Search

Amer Sinha

7 accepted papers

2025

Balls-and-Bins Sampling for DP-SGD

AISTATS 2025oral

We introduce the _Balls-and-Bins_ sampling for differentially private (DP) optimization methods such as DP-SGD. While it has been common practice to use some form of shuffling in DP-SGD implementations, privacy accounting algorithms have typically assumed that Poisson subsampling is used instead. Re…

Cited by 0SourceScholar
2025

Scaling Laws for Differentially Private Language Models

ICML 2025poster

Scaling laws have emerged as important components of large language model (LLM) training as they can predict performance gains through scale, and provide guidance on important hyper-parameter choices that would otherwise be expensive. LLMs also rely on large, high-quality training datasets, like tho…

Cited by 2SourcePDFScholar
2025

Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy

ICLR 2025poster

Machine unlearning algorithms, designed for selective removal of training data from models, have emerged as a promising approach to growing privacy concerns. In this work, we expose a critical yet underexplored vulnerability in the deployment of unlearning systems: the assumption that the data reque…

Cited by 1SourcePDFScholar
2024

How Private are DP-SGD Implementations?

ICML 2024oral

We demonstrate a substantial gap between the privacy guarantees of the Adaptive Batch Linear Queries (ABLQ) mechanism under different types of batch sampling: (i) Shuffling, and (ii) Poisson subsampling; the typical analysis of Differentially Private Stochastic Gradient Descent (DP-SGD) follows by i…

Cited by 16SourcePDFScholar
2024

Scalable DP-SGD: Shuffling vs. Poisson Subsampling

NeurIPS 2024poster

We provide new lower bounds on the privacy guarantee of _multi-epoch_ Adaptive Batch Linear Queries (ABLQ) mechanism with _shuffled batch sampling_, demonstrating substantial gaps when compared to _Poisson subsampling_; prior analysis was limited to a single epoch. Since the privacy analysis of Diff…

Cited by 7SourcePDFScholar
2023

Sparsity-Preserving Differentially Private Training of Large Embedding Models

NeurIPS 2023poster

As the use of large embedding models in recommendation systems and language applications increases, concerns over user data privacy have also risen. DP-SGD, a training algorithm that combines differential privacy with stochastic gradient descent, has been the workhorse in protecting user privacy wi…

Cited by 5SourcePDFScholar
2021

Differentially Private Aggregation in the Shuffle Model: Almost Central Accuracy in Almost a Single Message

ICML 2021spotlight

The shuffle model of differential privacy has attracted attention in the literature due to it being a middle ground between the well-studied central and local models. In this work, we study the problem of summing (aggregating) real numbers or integers, a basic primitive in numerous machine learning…

Cited by 44SourcePDFScholar